CLAIMS 



1 . In a browser/server environment, a method for bootstrapping a user 
database associated with an apphcation from an application server, comprising: 

forming a user information request page by the application; 
sending the user information request page to a user; 

returning a filled out user information request page to a pass through server 
target on the application server; 

extracting security data from the filled out user information page by the 
application server; and 

bootstrapping a user account in the user database by the application server 
based upon the extracted security data. 

2. A method as recited in claim 1, fiirther comprising: 

forwarding the filled out user information request page to the apphcation by 
the application server. 

3. A method as recited in claim 1, wherein the application server makes 
available a set of user security requirements to the application that define security data 
required to bootsfrap the user accoimt in the user database. 

4. A method as recited in claim 1, wherein the application includes a 
success target and a failure target, wherein the success target provides a success 
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destination when the bootstrapping is successful, and wherein the failure target 
provides a failure destination when the bootstrapping is unsuccessful. 

5 . A method as recited in claim 4, wherein the success destination is a 
success URL and wherein the failxire destination is a failure URL. 

6. A method as recited in claim 1 wherein the forming a user information 
request page comprises: 

merging the set of security registration requirements and user profile 
data requirements by the application; and 

collecting corresponding user profile data fi-om the user. 

7. A method as recited in claim 6, wherein the forwarding the filled out 
user information page to the application comprises: 

forwarding a subset of the security data and the collected user profile data. 

8. A method as recited in claim 7, further comprising: 

extracting the collected user profile data fi-om the forwarded filled out user 
information page. 

9. A method as recited in claim 8, wherein the collected user profile data 
is stored in a user profile database. 

10. In a browser/server environment, an apparatus for bootstrapping a user 
database associated with an application firom an appHcation server, comprising: 
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a means for forming a user information request page by the application; 
a means for sending the user information request page to a user; 
a means for returning a filled out user information request page to the 
application server; 

a means for extracting security data from the filled out user information page 
by the application server; and 

a means for bootstrapping a user account in the user database by the 
apphcation server based upon the extracted security data. 

11. An apparatus as recited in claim 1 0, fiirther comprising: 

a means for forwarding the filled out user information request page to the 
application. 

12. An apparatus as recited in claim 10, wherein the apphcation server 
makes available a set of user security requirements to the apphcation that define 
security data required to bootstrap the user account in the user database. 

13. An apparatus as recited in claim 10, wherein the application includes a 
success target and a failure target, wherein the success target provides a success 
destination when the bootstrapping is successful, and wherein the failure target 
provides a failure destination when the bootstrapping is unsuccessful. 

14. An apparatus as recited in claim 13, wherein the success destination is 
a success URL and wherem the failure destination is a failure UORL. 
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1 5 . An apparatus as recited in claim 1 0 wherein the forming a user 
information request page comprises: 

merging the set of security registration requirements and user profile 
data requirements by the application; and 

collecting corresponding user profile data from the user. 

16. An apparatus as recited in claim 15, wherein the forwarding the filled 
out user information page to the application comprises: 

forwarding a subset of the security data and the collected user profile data. 

17. An apparatus as recited in claim 16, further comprising: 
extracting the collected user profile data from the forwarded filled out user 

information page. 

1 8. An apparatus as recited in claim 1 7, wherein the collected user profile 
data is stored in a user profile database. 

19. A computer program product for enabling a computing system to 
bootstrap a user database associated with an application from an application server, 
the computer program product in a browser/server environment, comprising: 

computer code for forming a user information request page by the application; 
computer code for sending the user information request page to a user; 
computer code for returning a filled out user information request page to the 
application server; 
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computer code for extracting security data from the filled out user information 
page by the application server; 

computer code for bootstrapping a user account in the user database by the 
application server based upon the extracted security data; and 

a computer readable medium for storing the computer program product. 
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